Memory Forensics Survey

[Lisa Rzepka]

Hello everyone,

As part of our research, we are investigating the practical use and challenges of main memory acquisition and analysis. To this end, we are conducting a survey that takes 10-15 minutes to complete and can be found here:

https://fsv.tf/memory

If you have experience with main memory acquisition and analysis, we would appreciate it if you would take the time to participate in the survey.
We would also appreciate it if you would share the survey with your colleagues and acquaintances who might be interested in this topic. That would be very helpful. 🙂

Thank you very much and best regards
Lisa Rzepka, Benedikt Mader und Felix Freiling

[Adam Sindelar]

Hi Lisa,

I tried answering your survey, but I think it's phrased in a way that will filter out anyone who doesn't fit the preconceived idea of an average practitioner. Specifically, the survey seems to assume that people reach for these techniques very often, when in fact memory forensics has become fairly niche for most cyber security applications.

I say this as someone who was at the forefront of this field: I wrote MacPmem back in the day, and I was a big contributor to volatility/rekall. Even I no longer reach for these tools more often than once every couple of years.

As it stands, I think you'll get an over-representation of law enforcement and maybe people working in legacy environments, but many people on your mailing list will be unable to answer meaningfully.

Best,

Adam

Sent with Proton Mail secure email.

--
DFSci mailing list
df...@dfrws.org
 
Manage your subscription at:
https://groups.google.com/a/dfrws.org/g/dfsci/
To unsubscribe from this group and stop receiving emails from it, send an email to dfsci+un...@dfrws.org.